Sqlalchemy Mako
3 CVEs affecting Sqlalchemy Mako. Latest disclosed: 2026-05-12. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-41205 | High | 7.5 | 2026-04-23 | Mako is a template library written in Python. Prior to 1.3.11, TemplateLookup.get_template() is vulnerable to path traversal when a URI starts with // (e.g., /… |
CVE-2022-40023 | High | 7.5 | 2022-09-07 | Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and lingu… |
CVE-2026-44307 | | 2026-05-12 | Mako is a template library written in Python. Prior to 1.3.12, on Windows, a URI using backslash traversal (e.g. \..\..\ secret.txt) bypasses the directory tra… |